Critical vulnerability archive — page 189

marimo-team1 vulnerability on this pageMax CVSS 9.8Priority 99KEV 1

CVE-2026-39987 · marimo-team marimo

marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

KEV · due 7 May EPSS 100%public exploit SSVC act CVSS 9.8

Totolink9 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2026-5850 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setVpnPassCfg os command injection

EPSS 15%public exploit CVSS 9.8

CVE-2026-5851 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setUPnPCfg os command injection

EPSS 14%public exploit CVSS 9.8

CVE-2026-5852 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setIptvCfg os command injection

EPSS 14%public exploit CVSS 9.8

CVE-2026-5853 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setIpv6LanCfg os command injection

EPSS 14%public exploit CVSS 9.8

CVE-2026-5854 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setWiFiEasyCfg os command injection

EPSS 17%public exploit CVSS 9.8

CVE-2026-5977 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setWiFiBasicCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-5976 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setStorageCfg os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-5978 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setWiFiAclRules os command injection

EPSS 2%public exploit CVSS 9.8

CVE-2026-5975 · Totolink A7100RU

Totolink A7100RU CGI cstecgi.cgi setDmzCfg os command injection

EPSS 2%CVSS 9.8

FoundationAgents5 vulnerabilities on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-5972 · FoundationAgents MetaGPT

FoundationAgents MetaGPT terminal.py Terminal.run_command os command injection

EPSS 3%public exploit CVSS 9.8

CVE-2026-5973 · FoundationAgents MetaGPT

FoundationAgents MetaGPT common.py get_mime_type os command injection

EPSS 3%public exploit CVSS 9.8

CVE-2026-5974 · FoundationAgents MetaGPT

FoundationAgents MetaGPT terminal.py Bash.run os command injection

EPSS 3%public exploit CVSS 9.8

CVE-2026-5970 · FoundationAgents MetaGPT

FoundationAgents MetaGPT HumanEvalBenchmark/MBPPBenchmark check_solution code injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2026-5971 · FoundationAgents MetaGPT

FoundationAgents MetaGPT XML action_node.py ActionNode.xml_fill eval injection

EPSS 0.4%public exploit CVSS 9.8

axios1 vulnerability on this pageMax CVSS 9.9Priority 53KEV 0

CVE-2025-62718 · axios axios

Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF

EPSS 1%public exploit CVSS 9.9

Tenda3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2026-5841 · Tenda i3

Tenda i3 HTTP R7WebsSecurityHandler path traversal

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-5849 · Tenda i12

Tenda i12 HTTP path traversal

EPSS 0.7%public exploit CVSS 9.8

CVE-2026-5962 · Tenda CH22

Tenda CH22 httpd R7WebsSecurityHandlerfunction path traversal

EPSS 0.5%public exploit CVSS 9.8

mitre1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2026-31170 · mitre

An issue was discovered in ToToLink A3300R firmware v17.0.0cu.557_B20221024 allowing attackers to execute arbitrary commands via the stun…

EPSS 0.6%public exploit CVSS 9.8

davidfcarr1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-1830 · davidfcarr Quick Playground

Quick Playground <= 1.3.1 - Missing Authorization to Unauthenticated Arbitrary File Upload

EPSS 8%CVSS 9.8

MervinPraison4 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

v2board1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2026-39912 · v2board v2board

v2board / Xboard Authentication Token Exposure via loginWithMailLink

EPSS 0.6%public exploit CVSS 9.1

Canonical4 vulnerabilities on this pageMax CVSS 9.1Priority 45KEV 0

CVE-2026-34178 · Canonical lxd

Importing a crafted backup leads to project restriction bypass

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-34177 · Canonical lxd

VM lowlevel restriction bypass via raw.apparmor and raw.qemu.conf

EPSS 0.4%public exploit CVSS 9.1

CVE-2026-34179 · Canonical lxd

Update of type field in restricted TLS certificate allows privilege escalation to cluster admin

EPSS 0.3%public exploit CVSS 9.1

CVE-2025-15480 · Canonical Ubuntu

Senstive information disclosure was affecting ubuntu-desktop-provision

EPSS 0.3%CVSS 9.1

AOSC-Dev1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2026-39958 · AOSC-Dev oma

oma-topic: name Field in Topic Manifests (topic.json) May Allow CRLF Injection

EPSS 0.4%public exploit CVSS 9.1

OpenCTI-Platform1 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2026-39980 · OpenCTI-Platform opencti

OpenCTI affected by RCE via notifier template

EPSS 1%CVSS 9.1

Orthanc3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2026-5442 · Orthanc DICOM Server

Heap Buffer Overflow in DICOM Image Decoder via VR UL Dimensions

EPSS 0.6%CVSS 9.8

CVE-2026-5443 · Orthanc DICOM Server

Heap Buffer Overflow in DICOM Image Decoder (Palette Color Decode)

EPSS 0.6%CVSS 9.8

CVE-2026-5445 · Orthanc DICOM Server

Out-of-Bounds Read in DicomImageDecoder (DecodeLookupTable)

EPSS 0.7%CVSS 9.1

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-57735 · Apache Software Foundation Apache Airflow

Apache Airflow: Airflow Logout Not Invalidating JWT

EPSS 0.7%CVSS 9.1

CVE-2026-29145 · Apache Software Foundation Apache Tomcat

Apache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabled

EPSS 0.7%CVSS 9.1

Juniper Networks2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-33784 · Juniper Networks JSI LWC

JSI Virtual Lightweight Collector: Default password is not required to be changed which allows unauthorized high-privileged access

EPSS 0.5%CVSS 9.8

CVE-2026-33771 · Juniper Networks CTP OS

CTP OS: Configuring password requirements does not work which permits the use of weak passwords

EPSS 0.3%CVSS 9.1

wolfSSL3 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2026-5194 · wolfSSL wolfSSL

wolfSSL ECDSA Certificate Verification

EPSS 0.6%CVSS 9.3

CVE-2026-5264 · wolfSSL wolfSSL

DTLS 1.3 ACK heap buffer overflow

EPSS 0.5%CVSS 9.8

CVE-2026-5187 · wolfSSL wolfSSL

Heap Out-of-Bounds Write in DecodeObjectId() in wolfSSL

EPSS 0.3%CVSS 9.8

Contemporary Controls1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-13926 · Contemporary Controls BASControl20

Contemporary Controls BASC 20T Reliance on Untrusted Inputs in a Security Decision

EPSS 0.5%CVSS 9.8

OpenPLC_V32 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2026-28205 · OpenPLC_V3 OpenPLC_V3

Initialization of a resource with an insecure default in OpenPLC_V3

EPSS 0.5%CVSS 9.8

CVE-2026-35556 · OpenPLC_V3 OpenPLC_V3

Plaintext storage of a password in OpenPLC_V3

EPSS 0.3%CVSS 9.2

MISP1 vulnerability on this pageMax CVSS 9.6Priority 35KEV 0

CVE-2026-39962 · MISP MISP

LDAP injection in MISP ApacheAuthenticate when using a user-controlled Apache environment variable

EPSS 0.4%CVSS 9.6

bytecodealliance2 vulnerabilities on this pageMax CVSS 9.9Priority 34KEV 0

CVE-2026-34987 · bytecodealliance wasmtime

Wasmtime with Winch compiler backend on aarch64 may allow a sandbox-escaping memory access

EPSS 0.3%CVSS 9.9

CVE-2026-34971 · bytecodealliance wasmtime

Wasmtime miscompiled guest heap access enables sandbox escape on aarch64 Cranelift

EPSS 0.3%CVSS 9.0

sonicverse-eu1 vulnerability on this pageMax CVSS 9.9Priority 33KEV 0

CVE-2026-40089 · sonicverse-eu audiostreaming-stack

Sonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API client

EPSS 0.2%CVSS 9.9

Control System1 vulnerability on this pageMax CVSS 9.1Priority 32KEV 0

CVE-2026-34184 · Control System AlanWeb SCADA

Missing Authorization inAlanWeb SCADA

EPSS 0.3%CVSS 9.1

The archive.